WHAT IS CLAIMED IS: 



1. A cryptographic apparatus comprising: 

plaintext packet receiving means for receiving packet 
data transmitted and received between terminals; 

fragmentation determination means for making a 
determination as to whether there is a need for fragmentation 
of the packet data by computing the packet length when the 
packet data is encrypted and by comparing the computed packet 
length with a predetermined packet length; 

fragmentation means for dividing the packet data into a 
plurality of divided data groups if it is determined that 
there is a need for fragmentation of the packet data as a 
result of said determination, said fragmentation means setting 
the divided data groups in a plurality of divided data packets 
of a predetermined data structure capable of being 
reconstructed in a transmission destination terminal, said 
fragmentation means adding, to each divided data packet, 
control information for ensuring continuity between the 
divided data groups; 

encryption means for separately encrypting the plurality 
of divided data packets to form a plurality of encrypted 
packets; and 

encrypted packet transmitting means for transmitting the 
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plurality of encrypted packets to the transmission destination 
terminal . 

2 . A cryptographic communication system in which 
packet data transmitted and received between terminals is 
encrypted by a transmitting-side cryptographic apparatus and 
is decrypted by a receiving-side decryption apparatus; said 
system comprising: 

a cryptographic apparatus according to Claim 1; 

a decryption apparatus which receives the plurality of 
encrypted packets transmitted from said cryptographic 
apparatus, separately decrypts each of the plurality of 
encrypted packets into the divided data packet, and transmits 
the plurality of divided data packets to a transmission 
destination terminal in the decryption order; and 

a terminal which receives the plurality of divided data 
packets and reconstructs the divided data groups on the basis 
of the control information added to each divided data packet 
to obtain the packet data. 
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